1. Controller
The controller of your personal data is NovaStream S.A., Calle de Alcalá 21, 28014 Madrid, Spain. For any privacy question, contact [email protected].
2. Data we collect
- Account data — email address and authentication details you provide when you register.
- Subscription & billing data — plan, trial and renewal status, and transaction records. Card details are processed by our payment provider once checkout is connected; we do not store full card numbers.
- Usage data — basic technical information (IP address, browser type, pages viewed) needed to run and secure the service.
- Communications — messages you send us by email.
We do not collect special-category data, and we ask you not to send it to us.
3. Why we use it & legal bases
- To provide the service (account, streaming, the daily selection) — performance of our contract with you.
- To take payment and manage renewals — performance of contract and compliance with legal (tax/accounting) obligations.
- To secure and improve the service — our legitimate interests in running a safe, reliable product.
- Analytics and advertising cookies — only with your consent (see our cookie policy).
- To respond to you — our legitimate interest in answering your messages.
4. Sharing & processors
We share data only with service providers acting on our instructions (for example hosting, and a payment processor once billing is live), and where required by law. We list active analytics or advertising processors only when those scripts are actually running — during early access none are loaded by default. We do not sell your personal data.
5. International transfers
Where a provider processes data outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
6. Retention
We keep account and subscription data for as long as you have an account and for the period afterwards required to meet legal, tax and accounting obligations. Usage logs are kept for a short period for security and then deleted or aggregated. Email correspondence is kept only as long as needed to handle your request.
7. Your rights
Subject to applicable law, you have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent at any time (without affecting prior processing). To exercise any right, email [email protected]. You also have the right to lodge a complaint with your supervisory authority — in Spain, the Agencia Española de Protección de Datos (AEPD).
8. Children
Aveno is not directed at children and is intended for adults. We do not knowingly collect data from children.
9. Changes
We'll post any update here with a new effective date and, for material changes, notify members.